Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          EHamcCqUGZJ+HKL+Y/h0wwfAoQL+QvcjmCyALGh0WeA=
Subject key identifier:   BF:F4:13:89:5F:E5:C3:23:14:4C:33:10:64:6B:06:07:D3:8F:B7:D0
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019D27A927F09B4FB11EC144C224A62FDCDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          13CC
Signing time:             Thu 26 Mar 2026 01:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:30 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: Pz12ia1T8WitOJopsmLh0EJjlPZAub1o5Kkb5jZ+Sh0=)
                          2: _BiThTGjxk4mTLq-x93nIMvlUFM.roa (hash: eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:27:f0:9b:4f:b1:1e:c1:44:c2:24:a6:2f:dc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Mar 26 01:01:30 2026 GMT
            Not After : Mar 27 01:01:30 2026 GMT
        Subject: CN=bff413895fe5c323144c3310646b0607d38fb7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:b5:5f:0b:aa:19:18:a2:ce:2f:c7:0c:1d:
                    09:c4:16:8e:43:2f:cc:c8:3a:a9:ea:0c:d5:3e:6c:
                    aa:c7:44:ed:ab:e3:1d:3b:e8:90:6e:5c:b9:62:2c:
                    d8:bf:bb:2e:61:53:fb:52:24:71:49:69:8a:09:d1:
                    c2:9c:4c:45:75:24:9b:80:5d:d0:a3:58:12:92:ef:
                    f4:a0:47:03:c8:2a:14:41:92:3d:7c:d5:09:46:ab:
                    e9:1a:35:3d:e2:50:71:3e:b6:1c:cc:5b:54:31:10:
                    39:d2:35:60:a9:93:9e:a1:73:e1:cd:fe:cf:0b:af:
                    75:3b:2e:25:6e:97:e1:ed:5c:ea:71:53:9e:f3:73:
                    67:8f:95:9e:c4:eb:03:f9:c5:52:b1:1a:b8:7a:83:
                    00:7a:f7:09:17:92:07:bb:c2:e8:9c:26:d2:93:26:
                    a5:20:8b:ab:9d:7b:e9:7a:09:91:bf:81:ff:2d:37:
                    81:27:83:30:2d:a0:90:d4:ef:18:db:c8:ab:ca:95:
                    f6:38:58:41:b6:1f:1b:79:12:1b:a5:d6:ee:31:70:
                    59:e5:16:c3:ae:0f:2d:f4:38:ab:71:7a:3e:b7:0b:
                    61:f9:52:d9:48:bc:bd:6c:df:58:9b:e2:6d:dc:42:
                    31:c4:2b:10:89:0d:47:64:8e:74:6e:bd:f6:f6:3c:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F4:13:89:5F:E5:C3:23:14:4C:33:10:64:6B:06:07:D3:8F:B7:D0
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:79:8a:c6:fa:13:71:b0:8b:ee:32:54:f6:d3:cd:5b:1f:
         1f:ef:22:b1:eb:04:ff:b4:bf:94:2c:cf:f4:40:41:70:2c:97:
         7f:52:98:15:b1:61:b2:e3:6c:b9:12:14:44:fc:42:16:16:03:
         ef:48:78:1b:d3:1f:24:59:e2:1b:4e:05:64:11:71:3d:37:b7:
         80:85:34:b2:ef:38:42:79:73:72:1d:24:19:a8:e8:c5:58:fe:
         6d:c6:6e:06:1c:d6:ea:8a:2c:6f:e4:fa:86:2c:38:0f:80:55:
         8c:0b:98:27:9f:3d:d9:3b:90:a7:af:83:54:0f:fa:14:8c:7d:
         14:06:d3:e6:76:50:ee:e4:95:66:4a:57:f9:6d:47:98:d5:56:
         4f:ec:94:6c:a9:a1:7e:6c:25:94:b8:cd:12:df:8a:5c:51:fa:
         6b:a1:8f:8e:f3:0f:1a:f9:af:23:a4:8f:da:bf:02:c5:59:66:
         68:b5:3d:8d:37:b3:a6:8f:b6:ca:93:63:f8:c7:bf:9a:26:94:
         35:f2:7e:a4:ca:a6:f2:bb:78:44:57:ca:a6:8a:a4:8b:bd:f8:
         56:c0:77:05:4d:d7:bd:b6:7e:13:a3:91:9e:7d:09:e8:92:d5:
         c5:e1:5e:f1:d5:79:f4:65:40:d9:47:8e:93:ff:74:d4:ba:e3:
         95:11:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:12 2026 by rpki-client